A severe Node.js flaw enables denial-of-service (DoS) attacks when the async_hooks feature is active. Recursive calls or excessively deep structures trigger a stack overflow, exceeding the execution stack limit and instantly crashing the Node.js process—halting servers.
Key Details:
- Trigger: Active
async_hooks+ stack overflow conditions. - Impact: Immediate process termination, full server downtime.
Mitigation: Update to Node.js versions 20.20.0, 22.22.0, 24.13.0, or 25.3.0.
Next.js or React apps on Node.js 24+ remain unaffected.
Source: X (formerly Twitter).
